$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4daabb1-7c9a-3c44-81ba-1785776b146b.roa File: d4daabb1-7c9a-3c44-81ba-1785776b146b.roa (raw, json) Hash identifier: Kh7I7zxOpyajOL1HX/ndxa9eVBqV9o47w9DSwktwBHk= Subject key identifier: 7D:7C:38:A7:57:28:3E:9C:00:27:44:85:CB:AD:D7:BC:CF:58:00:C1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AC2E0FF346C27B3D6AD037180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4daabb1-7c9a-3c44-81ba-1785776b146b.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14675 IP address blocks: 66.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ff:34:6c:27:b3:d6:ad:03:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=5429fa9b-a2c2-457f-bf2e-b5131272b871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:4e:5d:5f:ab:99:05:fe:90:62:f6:ae:30: 59:76:0f:84:e7:b9:29:58:56:ca:2d:93:e6:df:f0: 5e:83:cf:ce:5e:03:8a:70:02:8c:3e:97:33:50:ad: 03:fc:d3:7d:57:18:5e:57:4f:44:5b:7d:a4:cc:3a: 21:2f:e1:a4:e5:3e:1e:29:03:e4:35:be:a0:0f:7f: e2:4c:d1:47:cc:0b:33:03:aa:11:9f:79:ea:a7:e6: 86:09:de:2f:57:f3:da:8c:28:8c:ec:18:72:0d:b5: d5:f8:7c:28:9b:74:56:c7:06:a8:05:76:7f:48:d9: 49:55:7d:b4:25:39:7e:a5:45:0d:17:a6:5e:bc:93: 23:be:1c:81:95:3f:bb:19:57:ec:ae:2a:55:4d:46: ec:27:e8:e2:46:07:a6:92:47:73:5e:1a:c9:64:e7: 81:43:b6:44:46:95:25:35:27:0d:33:cf:a8:ae:cf: 72:e7:2a:2f:ad:b3:13:b2:3d:31:c9:a8:7a:6f:94: 00:7a:18:6f:27:78:25:c8:ee:11:59:9a:c0:d6:6e: 28:3a:e8:db:22:2a:ca:ba:fb:4e:43:b8:26:b7:91: 3d:fe:b7:6d:7c:24:46:4e:14:34:5d:64:7a:0e:7c: cc:75:37:01:71:86:b3:e0:6d:6b:60:95:44:20:63: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:38:A7:57:28:3E:9C:00:27:44:85:CB:AD:D7:BC:CF:58:00:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4daabb1-7c9a-3c44-81ba-1785776b146b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:34:aa:a2:d6:98:6e:9c:e3:20:99:91:7a:b8:25:fa:3f:0a: 9f:37:d9:d4:50:23:e7:c2:2a:44:7e:9c:d2:7e:7d:ad:29:17: 6e:9c:31:fe:f7:ba:2b:c0:ad:25:67:6a:11:05:69:0c:9e:48: f5:2a:ff:d9:16:03:79:49:27:44:d5:7a:39:bb:4f:6d:ca:cd: 0e:97:1c:19:84:8d:1a:87:88:7f:16:b9:6d:af:80:1a:85:d7: da:60:45:a5:a5:12:cd:37:c8:54:73:c0:83:8e:06:3b:09:62: a7:5a:04:a1:ce:eb:88:d4:09:17:1d:e3:81:27:33:a9:f6:4f: 39:24:2e:cc:a7:f9:2e:7c:0a:ae:f2:0c:42:af:7a:ab:87:ca: 0f:e4:92:c6:01:cf:7d:6d:54:97:73:24:70:a4:1e:73:bb:e1: 7d:34:09:18:c7:96:72:54:b2:e4:a6:56:f1:34:89:63:19:6e: a9:d1:4e:61:08:2a:28:4b:3d:f5:88:9f:00:12:3b:bd:d2:02: b1:4a:25:8f:08:ee:50:37:ed:1b:21:cc:70:20:06:b8:29:ad: 0a:44:e0:c3:c9:9c:ce:90:68:d7:da:61:96:09:f7:1b:7e:fc: f7:9d:ae:fe:42:a4:cd:ff:0d:a2:8d:84:5d:9c:6f:eb:1f:9a: 6b:ec:f4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P80bCez1q0DcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTQyOWZhOWItYTJjMi00NTdmLWJmMmUtYjUxMzEyNzJiODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWxOXV+rmQX+kGL2rjBZdg+E57kpWFbKLZPm 3/Beg8/OXgOKcAKMPpczUK0D/NN9VxheV09EW32kzDohL+Gk5T4eKQPkNb6gD3/i TNFHzAszA6oRn3nqp+aGCd4vV/PajCiM7BhyDbXV+Hwom3RWxwaoBXZ/SNlJVX20 JTl+pUUNF6ZevJMjvhyBlT+7GVfsripVTUbsJ+jiRgemkkdzXhrJZOeBQ7ZERpUl NScNM8+ors9y5yovrbMTsj0xyah6b5QAehhvJ3glyO4RWZrA1m4oOujbIirKuvtO Q7gmt5E9/rdtfCRGThQ0XWR6DnzMdTcBcYaz4G1rYJVEIGPAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH18OKdXKD6cACdEhcut17zPWADBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDRkYWFiYjEtN2M5YS0z YzQ0LTgxYmEtMTc4NTc3NmIxNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANU0qqLWmG6c4yCZkXq4Jfo/Cp832dRQI+fCKkR+nNJ+fa0pF26cMf73 uivArSVnahEFaQyeSPUq/9kWA3lJJ0TVejm7T23KzQ6XHBmEjRqHiH8WuW2vgBqF 19pgRaWlEs03yFRzwIOOBjsJYqdaBKHO64jUCRcd44EnM6n2TzkkLsyn+S58Cq7y DEKvequHyg/kksYBz31tVJdzJHCkHnO74X00CRjHlnJUsuSmVvE0iWMZbqnRTmEI KihLPfWInwASO73SArFKJY8I7lA37RshzHAgBrgprQpE4MPJnM6QaNfaYZYJ9xt+ /Pedrv5CpM3/DaKNhF2cb+sfmmvs9FA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:30:39 2025 by rpki-client